DevSecOps Engineer (Ambler PA)
Berkadia
The DevSecOps Engineer is passionate about security, automation, and continuous integration/continuous deployment (CI/CD) pipelines. In this role, you will play a crucial role in ensuring the security and reliability of our systems by integrating security practices into our DevOps processes. You will have the opportunity to work with cross-functional teams to design, implement, and maintain secure infrastructure and applications, while staying current with emerging security trends and best practices.
We Innovate to shape the future of CRE, so in this role you will:
- Collaborate with development, operations, and security teams to integrate security into the software development lifecycle (SDLC) and CI/CD pipelines.
- Design, implement, and maintain secure infrastructure and cloud environments using automation tools such as Terraform, Ansible, or Puppet.
- Implement and configure security tools and technologies, including vulnerability scanners, intrusion detection/prevention systems (IDS/IPS), and security information and event management (SIEM) solutions.
- Conduct security assessments, penetration testing, and code reviews to identify and remediate security vulnerabilities.
- Monitor system logs and alerts for security incidents and respond promptly to mitigate risks and ensure compliance with industry standards and regulations.
- Develop and maintain documentation, standards, and procedures related to security and compliance.
- Provide guidance and support to development teams on secure coding practices, threat modeling, and security-related issues.
- Stay current with industry trends and best practices in DevSecOps, security automation, and cloud security, and contribute to continuous improvement efforts.
We Stand for Excellence, so to achieve success in this role you should have:
- Strong understanding of DevOps methodologies, software development principles, and agile practices.
- Hands-on experience with cloud platforms such as AWS, Azure, or Google Cloud, and proficiency in infrastructure as code (IaC) tools.
- Knowledge of security concepts and best practices, including encryption, access control, identity management, and secure coding principles.
- Experience with security tools and technologies, such as vulnerability scanners, IDS/IPS, SIEM solutions, and web application firewalls (WAFs).
- Familiarity with compliance standards and regulations, such as PCI DSS, HIPAA, GDPR, and industry frameworks like NIST Cybersecurity Framework or CIS Controls.
- Strong scripting and automation skills, with proficiency in languages such as Python, Bash, or PowerShell.
- Excellent problem-solving skills, attention to detail, and ability to work effectively in a fast-paced, dynamic environment.
- Strong communication and collaboration skills, with the ability to work effectively in cross-functional teams.
- 3+ years of experience in a DevOps or security engineering role, with a focus on implementing security in CI/CD pipelines and cloud environments.
- Experience with containerization technologies such as Docker and Kubernetes.
- 401k with company contribution
- Access to Coaching (Health, Professional, Life)
- Community Service Programs
- Pet Insurance
- Commitment to Work/Life Harmony
- PTO
- Dental Insurance
- FSA
- Health Insurance
- HSA
- Mental Health Benefits
- Vision Insurance
- Parental Leave
- Tuition Reimbursement
Berkadia is a leader in commercial real estate (CRE); we sell, finance and service properties on behalf of our multifamily and commercial property clients and our innovation team is shaping the future of CRE by leading the evolution of the industry’s technology landscape. With a significant investment in technology and proprietary data gleaned from properties and markets across the country, we have developed a unique and fully integrated platform that marries local real estate expertise with capital markets knowledge. This platform empowers our advisors to deliver actionable insights gleaned from decades of proprietary data — powered by the most innovative technology — to maximize returns on our clients’ investments.
From software engineers to analysts, Berkadia gives you the space and has the infrastructure in place for your ideas to flourish, charting a path for the future of our company and leading the evolution of the commercial real estate industry at large. Technology, data and analytics aren’t buzzwords — they are what’s driving our industry forward. With expertise in the latest programming languages and a variety of industry-leading tech stacks and emerging technologies including cloud architecture, infrastructure as code and containerization technologies, our team boasts the brightest tech minds in the industry, and we let them do what they do best: create and innovate.
People Matter is a core value at Berkadia, and in a relationship business like CRE, we can only provide best-in class service to our clients when our own people are taken care of first. Our private ownership structure with Berkshire Hathaway and Jefferies Financial Group allows us to make decisions for the benefit of our employees and clients, not shareholders. We’re invested in our people and committed to doing things the right way.
We believe People Matter, so we offer benefits that go beyond:
● Monthly paid volunteer hours and donation matching to benefit our communities
● Employee Resource Groups that help you grow with us
● Fertility and family planning services
● Up to 12-weeks of fully paid parental leave
● Mental health care, including free counseling sessions
● We’ll help fund your learning journey with generous tuition reimbursement
● Pet insurance discounts
● And more!
Our competitive benefits package reflects your priorities, which we give thoughtful consideration to allow you to grow your career in a values-based culture. Click here to learn more about what it means to be part of building the next and be Berkadia.
